Error Message 2145833241 -Device Management Could not be enabled

Question

Error Message 2145833241 -Device Management Could not be enabled

Laura Weir 0

While trying to add work/school account to a new laptop this error message appears. We are a non profit charity and after Microsoft removed the free 365 access for charities we purchased 365 standard for each of our groups and bought Business Premium for manager & administrator. Can someone please help me with this?

0 comments

1 answer

Your answer

Answer 1

Demi Nguyen 2,165 Independent Advisor

Hello Laura Weir,

Before reviewing the device enrollment settings, could you please confirm the following information?

What exact license was assigned to each affected user before the licensing change?
What license is currently assigned to the user experiencing the issue?
Does each user who needs to enroll a device have a license that includes Microsoft Intune, such as Microsoft 365 Business Premium?
After the license changes, are all users still located in the same Microsoft 365 tenant, or were any users moved to a different tenant?
Does the issue occur on only this new laptop, or on multiple devices?

A suitable Microsoft Intune license must be assigned to each user who needs to enroll a device for management. Microsoft 365 Business Standard does not include the same Intune device-management capabilities as Microsoft 365 Business Premium. Therefore, it is important to check the license assigned to the specific affected user, not only the licenses purchased for the organization.

The error code 2145833241 occurs when Windows cannot enable device management during enrollment. This commonly points to a tenant-side licensing or enrollment configuration issue rather than a problem with the local computer.

When a user adds a work or school account, Windows may attempt to register the device with Microsoft Entra ID and enroll it in Microsoft Intune. The process can fail if the affected user does not have an eligible Intune license, if the user is not included in the MDM enrollment scope, or if enrollment restrictions prevent personal Windows devices from being enrolled.

Please verify in the Microsoft 365 admin center that the affected user has an eligible license Microsoft Intune, and that the Intune service is enabled for the user.

In the Microsoft Intune admin center, please also review Devices > Enrollment > Windows > Enrollment restrictions and confirm that personal Windows devices are allowed. Then check Devices > Enrollment > Windows > Automatic Enrollment and confirm that the affected user is included in the "MDM user scope". Microsoft recommends retaining the default values for the MDM terms of use, discovery, and compliance URLs: Enable MDM automatic enrollment for Windows - Microsoft Intune | Microsoft Learn

If the organization does not intend to manage the laptop through Intune, do not select Allow my organization to manage this device when signing in. If the option is available, select "No, sign in to this app only" instead. This allows the user to sign in to the application without attempting full device enrollment.

For additional examples and discussion of the same error, please refer to:

If the same error occurs for multiple users or computers, the Intune licensing and tenant enrollment policies should be reviewed first. If those settings appear correct but enrollment still fails, the Global Administrator may need to open a support request with Microsoft for further tenant-level diagnostics.

Kind regards,

Laura Weir 0 Reputation points

2026-09-24T13:44:56.4533333+00:00

Thank you for this information. I am an administrator for a charity and not an IT person so a lot of this over my head.

Previously all our groups had a free Microsoft 365 business non profit package, since this was taken away i have purchased Microsoft Business 365 standard for each group and myself and a manager have the premium package. All licences are allocated to each account correctly.

I have added a few screenshots of what is on my Intune Admin Centre. Looking at the devices i am the only one named. From what you are saying is that a standard 365 business package doesnt have Intune so i can not get them on here?

Screenshot 2026-09-24 143601.png
Demi Nguyen 2,165 Reputation points Independent Advisor

2026-09-24T15:19:26.8866667+00:00
Thank you for the additional information and screenshots.

Yes, your understanding is correct. Unless you purchased a separate Microsoft Intune standalone license, users assigned only Microsoft 365 Business Standard do not have Intune included. Each user who needs to enroll a device into Intune must have an eligible license assigned directly to that user.

This would explain why your own account appears in the Intune admin center while users with Business Standard may be unable to complete device-management enrollment.

To better understand what is happening on the new laptop, could you please confirm:

Which edition of Windows is installed, for example, Windows 11 Home, Pro, Enterprise, or Education?

Which user is experiencing the error, and what license is assigned to that user?

Is the user trying to sign in only to an application such as Outlook, Teams, or Word?

Or is the user trying to create a separate Windows profile and sign in to Windows using the organization’s business account?

You can check the Windows edition by going to: Settings > System > About > Windows specifications > Edition

If the intention is to create a Windows profile using the business account and fully join the laptop to Microsoft Entra ID, the laptop must use a supported Windows edition. Windows Home does not support Microsoft Entra join; Windows Pro, Enterprise, or Education is normally required. Microsoft Entra joined devices use the organization account to sign in to Windows.

If the user only needs access to Outlook, Teams, Word, Excel, or other Microsoft 365 applications, full Microsoft Intune enrollment may not be necessary. The work account does not necessarily need to be added to Windows under Settings > Accounts > Access work or school.

Instead, the user can open the required Microsoft 365 application and sign in directly with the work account. When the sign-in window asks whether the organization should manage the device, select "No, sign in to this app only", if this option appears and the organization does not require device management.

However, if you want the laptop to be managed through Intune, the affected user must have the appropriate Intune license, be included in the MDM enrollment scope, and use a supported Windows configuration.

Please send me the Windows edition, the affected user’s assigned license, and where the user is trying to sign in. This will help determine whether the correct solution is application-only sign-in, Microsoft Entra join, or Intune enrollment.

Kind regards,
Laura Weir 0 Reputation points

2026-09-24T15:43:31.6733333+00:00

I do not want to manage them at all, so will try your advice above and see how it goes. I'm in a physically different location from the laptop and we work at different times so will have a look next week. at their set up.

Many Many Thanks, i will probably be in touch next week!
Demi Nguyen 2,165 Reputation points Independent Advisor

2026-09-25T13:26:24.4033333+00:00

You’re very welcome. Please take your time, and let me know how it goes or if you need any further help next week.